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l. Establish policy relating to the security of the 
Agencys Information Processing Systems. 


2. Perform surveys and make security evaluation of 
ongoing AIPS. a 


Perform surveys and make security evaluation of 
contractor IPS holding Agency information. 


Conduct physical and technical inspection resulting 
in security determinations on inhouse areas that 
will hold information process equipment. 


Conduct physical and technical inspections resulting 

in security determinations on contractor areas 

that will hold information process equipment meee oc 
information supplied by this—Ageney.cAxn C/4. 


6. Operate the computer security audit analysis program. 


7. Provide representation to the computer security sub- 
committee. 


8. Provide representation COINS security panel. 
9. Maintain the Agency Top Secret control program. 


of 
10. Develop central automateen inventory system for the 
Top Secret control program. 
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TDENTIFREREQ YR OAR PLAS OR AO 08 ; CIA Security component responsible 
for establishing policy relating to the 
security of the Agencys Information Processing 


Systems. 
ACTIVITY CODE: II, Cc = COMPONENT: OS/P&M/Information Systems 
Security Group 
EVALUATION: DATE: 


What is (are) our reference(s) for this activity? Date(s)? 


25X1A 


Is (are) the reference(s) still in force? Yes — No 
Who is (are) the beneficiary(ies) of this activity? 


Mpenay Ad 2 


Do you feel the activity is still necessary? Yes ie No an 

Do(es) the beneficiary(ies) feel it is still necessary? Yes No 

Can the activity be done more efficiently or less costly? Yes No 
If so, how? 


Do you feel that responsibility for the activity should be transferred 
to another OS component or to another Office? Yes No 
If so, where and why? 


Can another component do the activity more efficiently? Less costly? 
More properly? Yes No» If so, which component and why? 


Does the activity include anything questionable in the light of 
Watergate? Yes No If so, what? 


Can this activity be reduced in scope/size or discontinued without 
Significant effect on overall Agency security? Yes No -— 
If so, how? 


Is there any activity not now being pursued by OS that you feel is more 
important than this one? Yes No ~~ If so, what? 
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evaluation of ongoing AIPS. 


ACTIVITY CODE: TiC. 2 COMPONENT: OS/P§&M/Information Systems 


Security Group 
EVALUATION: DATE: 
“What is (are) our reference(s) for this activity? Date(s)? 
25X1A | AG Mug 7H 
Is (are) the reference(s) Still in force? Yes ~~ No 


Who is (are) the beneficiary(ies) of this activity? 


Af 4 
; of 


a . 
Do you fedl the activity is still necessary? Yes 4 No 
Do(es) the beneficiary(ies) feel it is still necessary? Yes y~ No 
Can the activity be done more efficiently or less costly? Yes No 
If so, how? 


Do you feel that responsibility for the activity should be transferred 
to another OS component or to another Office? Yes No 
if so, where and why? : 


Can another component do the activity more efficiently? Less costly? 
More properly? Yes No_&~ If so, which component and why? 


Does the activity include anything questionable in the light of 
Watergate? Yes No If so, what? 


Can this activity be reduced in scope/size or discontinued without 
Significant effect on overall Agency security? Yes No 
If so, how? 


Is there any activity not now being pursued_by OS that you feel is more 
important than this one? Yes No If so, what? 
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evaluation of contractor IPS holding Agency 


information, ; 
ACTIVITY CODE: If. c¢, 3 COMPONENT: OS/P§&M/Information Systems 
= Security Group 
EVALUATION: DATE: 


‘What is (are) our reference(s) for this activity? Date(s)? 


25X1A AP Kheg 7 


Is faré) the reference(s) still in force? Yes ae 
Who is (are) the beneficiary (ies of this ae aes 
¥Le OV fo-e wakith, Kat KLE o., 


Do you feel the activity is still necessary? Yes ~~ No 

Do(es) the beneficiary(ies) feel it is still necessary? Yes i No 

Can the activity be done more efficiently or less costly? Yes Noe 
If so, how? 


Do you féel that responsibility for the activity should be transferred 
to another OS component or to another Office? Yes No + 
If so, where and why? 


Can another component do the activity more efficiently? Less costly? 
More properly? Yes No &— If so, which component and why? 


Does the activity include anything questionable in the light of 
Watergate? Yes No If so, what? 


Can this activity be reduced in scope/size or discontinued without 
Significant effect on overall Agency security? Yes No 
If so, how? 


fanclirr et gto’ 
Is there any activity not now being pursued by OS that you feel is more 
important than this one? Yes No If so, what? 
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for conducting physical and technical 
inspection resulting in security determinationg 
on inhouse areas that will hold information 
process equipment. 


ACTIVITY CODE: II. Cc 4 COMPONENT: OS/P&M/Information Systems 


Security Group 
EVALUATION: DATE: 


What is (are) our reference(s) for this activity? Date(s)? 
xi 2? Klug 77 


Is (are) the reference(s) still in force? Yes &—~ No 
Who is (are) the beneficiary (ies) of this activity? 


Verminjg  eAtrS. 


—_— 


-Do you feel the activity is still necessary? Yes — No 

-.Do(es) the beneficiary(ies) feel it is still necessary? Yes No 

Can the activity be done more efficiently or less costly? Yes Now 
If so, how? ; 


Do you féel that responsibility for the activity should be transferred 
to another OS component or to another Office? Yes No 
If so, where and why? 


Can another component do the activity more ,efficiently? Less costly? 
More properly? Yes No ~~ If so, which component and why? 


Does the activity include anything questionable in the light of 
Watergate? Yes No ae If so, what?. 


Can this activity be reduced in scope/size or discontinued without we 
Significant effect on overall Agency security? Yes No 
If so, how? 


Is there any activity not now being pursued by OS that you feel is more 
important than this one? Yes No If so, what? 
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for conducting physical and technical 
inspections resulting in security determina- 
tions on contractor areas that will hold 
information process equipment using informa-_ 
tion supplied Dy the CIA. 


ACTIVITY CODE: COMPONENT: OS/P&M/Information Systems 
Security Group 
EVALUATION: ; . - . DATE: 


‘What is (a erence(s) for this activity? Date(s)? 
25X1A | Mug 23, 7K 


Is (are) the reference(s) still in Pages Yes No 
Who is (are) the beneficiary(ies) of this activity? 


Orfece Aotoling 


Do you feel the activity is still necessary? Yes »~ No 

Do(es) the beneficiary (ies) feel it is still necessary? Yes Yes ~~ No 

Can the activity be done more efficiently or less costly? Yes — No, 
If so, how? 


' Do you feel that responsibility for the activity should be transferred 
to another OS component or to another Office? Yes No 4. 
If SO, where and why? , 


Can another component do the activity more efficiently? Less costly? 
More properly? Yes __ If so, which component and why? 


Does the activity include anythi g aueseicaule in the -dagne of 
Watergate? Yes No peat. so, what? 


Can this activity be reduced in scope/size or Aiseonviaucd without | 
Significant effect on overall Agency security? Yes No «—— 
If so, how? 


Is there any activity not now being pursued by OS that you feel is more 
important than this one? Yes No If so, what? 
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IDENTIFI onbhe i. > 15 sRNO8I9RUGOFI0020020-0s ib 16 
AprOVEP Rot Reldase 20/1 705166! cela RGpEsBvoszaRI security audit . 
analysis program. 


COMPONENT: OS/P§&M/Information Systems 
Security Group 


ACTIVITY CODE: PEC. 6: 


‘EVALUATION: DATE: 

What is (are) our (s) for this activity? Date(s)? 

25X1A 2 Mag Tey 
Is (are) the reference(s) still in force? Yes -— No 


Who is (are) the beneficiary(ies) of this activity? 


Do you feel the activity is still necessary? Yes L—-No 

Do(es) the beneficiary(ies) feel it is still necessary? Yes L— No 

Can the activity be done more efficiently or less costly? Yes No, 
If so, how? , 


Do you féel that responsibility for the activity should be transferred 
to another OS component or to another Office? Yes NO ioe 
If so, where and why? 


Can another component do the acts) more efficiently? Less costly? 
More properly? Yes No If so, which component and why? 


Does the activity include anything questionable in the light of 
Watergate? Yes - No £f so, what? 


Can this activity be reduced in scope/size or discontinued without 7" 
Significant effect on overall Agency security? Yes No 
If so, how? 


Is there any activity not now being pursued by.OS that you feel is more 
important than this one? Yes No If so, what? 
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for providing representation to the computer 
security subcommittee. 


ACTIVITY CODE: -JfI.¢ ___ COMPONENT: OS/P&M/Information Systems 


Security Group 
EVALUATION: . - DATE: 


What is (are) our reference(s) for this activity? Date(s)? 


tenes. 


Is (are) the reference(s) still in force? Yes No 
Who is (are) the beneficiary(ies) of this activity? 


—_ : 
We Es 4 (Dromrre . 
Do you feel the activity is still necessary? Yes — No | 
Do(es) the beneficiary(ies) feel it is still necessary? Yes i No 


Can the activity be done more efficiently or less costly? Yes No 
If so, how? a 


Do you féel that responsibility for the activity should be transferred 
to another OS component or to another Office? Yes No 
if so, where and why? . 


Can another component do the activity more efficiently? Less costly? 
More properly? Yes No, If so, which component and why? 


Does the activity include anyt ing questionable in the light of 
Watergate? Yes No If so, what? 4 


Can this activity be reduced in scope/size or discontinued without 
Significant effect on overall Agency security? Yes No 
If so, how? , 


Is there any activity not now being pursued by OS that you feel is more 
important than this one? Yes No If so, what? 
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or providing representation COINS security 


panel. 
ACTIVITY CODE: Thee (Co 8 COMPONENT: OS/P&M/Information Systems 
Security Group 
EVALUATION: DATE: 


"What is (are) our reference(s) for this activity? Date(s)? 


a 28 le 70 


Is (are) the reference(s) still in force? Yes £~ No 
Who is (are) the beneficiary(ies) of this activity? 


Apery — 


Do you feel the activity is still necessary? Yes No 
Do(es) the beneficiary(ies) feel it is still necessary? Yes i No 
Can the activity be done more efficiently or less costly? Yes No 

If so, how? 


Do you féel that responsibility for the activity should be transferred 
to another OS component or to another Office? Yes No 
If so, where and why? ¥ 


Can another component do the activi ~more efficiently? Less costly? 
More properly? Yes _No If so, which component and why? 


Does the activity include any thing questionable in the light of 
Watergate? Yes No If so, what? <> 


Can this activity be reduced in scope/size or discontinued without 
Significant effect on overall Agency security? Yes No 
If so, how? 


Is there any activity not now being pursued by OS that you feel is more 
important than this one? Yes No If so, what? 
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IDENT IF OAT ION Hof RULES 2084166? CAPR DPSIBOOB2eROODTO002002TIAs ip1. 
for maintaining the Agency Top Secret 
control program. 


ACTIVITY CODE: ce ee Oe ® COMPONENT: OS/P§&M/Information Systems 


Security Group 
EVALUATION: ' DATE: 


"What isDate) our reference(s) for this activity? Date(s)? 


| Is (ar ce(s orce! Yes + No 
Who is (are) the beneficiary(ies) of this activity? 


: pene Ad a cerle-€e ,. 


Do you feel the activity is still necessary? Yes — No 
Do(es) the beneficiary(ies) feel it is still necessary? Yes —"No 
Can the activity be done more efficiently or less costly? Yes. No 

If so, how? 


Do you féel that responsibility for the activity should be har pata 
to another OS component or to another Office? Yes No 
If so, where and why? 7 


Can another component do the Soe) were er ceonely? Less costly? 
More properly? Yes No If so, which component and why? 


oe 


Does the activity include anything questionable in the light of 
Watergate? Yes No If so, what? 


Can this activity be reduced in scope/size or discontinued without 
Significant effect on overall Agency security? Yes No’\ 
If so, how? 


Is there any activity not now being pursued by OS that you feel is more 
important than this one? Yes No If so, what? _ 
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OPT" ABBALPE ALES no DEE ee Reape on onan: 


system for the Top Secret control program. 


COMPONENT: OS/P&M/Information Systems 
Security Group 


ACTIVITY CODE: t1.C. 10 


EVALUATION: DATE: 
What is (are) our as for this activity? Date(s)? 
- 25X1A 
Is (are) the reference(s) still in force? Yes + No 


Who is (are) the beneficiary(ies) of this activity? 
Do you feel the activity is still necessary? Yes + No 
Do(es) the beneficiary(ies) feel it is still necessary? Yes No 


Can the activity be done more efficiently or less costly? Yes No» 
If so, how? 


Do you feel that responsibility for the activity should be transferred 
to another OS component or to another Office? Yes No 
If so, where and why? 


Can another component do the Bot tec Etene ty? Less costly? 
More properly? Yes No If so, which component and why? 


Does the activity include anything questionable in the light of 
Watergate? Yes No If so, what? 


Can this activity be reduced in scope/size or discontinued without 
Significant effect on overall Agency security? Yes No 
If so, how? 


Is there any activity not now being pursued by OS that you feel is more 
important than this one? Yes No If so, what? 


1 Hi = B 
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ROUTING AND RECORD SHEET 


SUBJECT: (Optional) 


25X1A 


Policy and Plans Group 


TO: (Officer designation, room number, and 


DATE 


EXTENSION | NO. 


DATE 


5 March 197 


building) OFFICER'S | COMMENTS (Number each comment to show from whom 
| ScetivEnl le aeAnoEs INITIALS to whom. Draw a line across column after each comment.) 
r Qipir Ti HE a 
Chief, Special Security Under Objective B57104 the 
Group fo Office of Security will re- 
= view and validate all Office 


ie 


of Security functions, 
activities ...to ensure effeqd- 


tiveness, economy and efficigqncy 
The attached documents re- 
present two milestones under 


that objective. Milestone 1 
the components identified 
their functions and activitiqs. 


PPG 


Milestone 2 was establishment 
of a format for evaluating 


these...activitie It:is ye 


vested that Sf@crar Securtey 
tian tev iew the attachment 
and: 


| 


a) Certify that there are nq 
déletions/corrections/ 
additions to be made to 


EI 
bag | the previous listing sub 
mitted by your office. 
b) Review the Identificatio 
of Activity statement on 
each evaluation sheet to 
ae ensure it fully equals td 
Me: the comparable activity 
from your offices listing. 
i a ee ae ae c) Use the attached format 
; to evaluate each individual 
activity.” 
i= ie + : 
We Jack: 
In reviewing the listed attivitiles, it appears that #3 and 
13. #5 should be combined. che oripinal intent was to reflect a 
continuing review i ongoling contracts but also a security 
inspection of a new contractor prior to operation. If you agree, 
14. a possible rewrite fis: 
"Conduct surveys or Pp! steo teen ee inspectiorw resulting 
15. in security determinationsyon ,contractor areas and/or equipment 
that| will hold and/Prodess information supplied 


' 


= a 'e 
JUIOUVS 
REVIOUS 
EDITIONS 


610 
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